Unknown requests from IE 5

From: David Ward (dwardat_private)
Date: Mon Oct 22 2001 - 15:20:58 PDT

  • Next message: Mike: "Odd probes from Cisco equipment..."

    We seem to have been receiving a number of HTTP requests similar to the 
    following lately: - - [22/Oct/2001:14:07:59 -0700] "GET 
    /_vti_bin/owssvr.dll?UL=1&ACT=4&BUILD=2614&STRMVER=4&CAPREQ=0 HTTP/1.0" 
    200 20677 "-" "Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)" - - [22/Oct/2001:14:08:00 -0700] "GET 
    /MSOffice/cltreq.asp?UL=1&ACT=4&BUILD=2614&STRMVER=4&CAPREQ=0 HTTP/1.0" 
    200 20677 "-" "Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)"
    Does anyone know what these requests are looking for?  I am assuming 
    that they are harmless requests from IE 5 assuming that it is talking to 
    an IIS or exchange server, but I cannot find anything that mentions what 
    these files actually are.
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com

    This archive was generated by hypermail 2b30 : Mon Oct 22 2001 - 15:34:13 PDT